GH-100 · Question #34
GH-100 Question #34: Real Exam Question with Answer & Explanation
The correct answer is B: EMU accounts are managed through an identity provider such as Azure AD.. GitHub Enterprise Managed Users (EMU) accounts are provisioned and controlled entirely through an external identity provider (IdP) like Azure AD (B), meaning the enterprise - not the individual - holds full authority over account creation, access, and credentials. These accounts
Question
You are planning GitHub account management for a healthcare organization with strict compliance requirements. Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)
Options
- AEMU accounts can be used for both personal and enterprise repositories.
- BEMU accounts are managed through an identity provider such as Azure AD.
- CEMU accounts allow users to create and manage their own credentials.
- DEMU accounts restrict users to enterprise-related activities only
- EEMU accounts are created and managed by individual users.
- FEMU accounts are owned by the organization and cannot be unlinked.
Explanation
GitHub Enterprise Managed Users (EMU) accounts are provisioned and controlled entirely through an external identity provider (IdP) like Azure AD (B), meaning the enterprise - not the individual - holds full authority over account creation, access, and credentials. These accounts are scoped exclusively to enterprise activity (D), preventing users from contributing to personal projects or public repositories outside the organization's control. Critically, EMU accounts are owned by the organization and cannot be unlinked (F), making them ideal for compliance-heavy environments like healthcare where auditability and centralized control are mandatory.
Why the distractors are wrong:
- A is wrong because EMU accounts cannot be used for personal repositories - they are isolated to the enterprise.
- C is wrong because users have no ability to create or manage their own credentials; the IdP controls authentication entirely.
- E is wrong because EMU accounts are created by the enterprise/IdP administrators, not individual users.
Memory tip: Think of EMU accounts as "employee-only badges" - the company issues them, restricts where they work, and keeps them when the employee leaves. No personal use, no self-service, no separation from the organization.
Topics
Community Discussion
No community discussion yet for this question.